Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d93c3278-18fc-3837-bb75-663397a84097.roa
File:                     d93c3278-18fc-3837-bb75-663397a84097.roa (raw, json)
Hash identifier:          ODaOmwRQt7Xpux7fYeTOHOxDUBjUsHorN3nVOR11Wsw=
Subject key identifier:   65:89:A7:5E:0E:30:86:BA:9A:71:F1:4E:42:1F:08:5E:53:57:F7:31
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071C0314566AD61F930C0680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d93c3278-18fc-3837-bb75-663397a84097.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        108.162.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1c:03:14:56:6a:d6:1f:93:0c:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=950549ae-c2c6-4fa8-bae3-b036157a9ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d7:54:57:18:9b:05:12:fb:dd:b5:7c:f4:40:
                    ae:19:4c:2d:a0:92:6a:85:46:e9:dc:86:ff:da:6f:
                    28:f0:63:32:5d:2c:38:04:8d:82:2a:9f:07:cc:b9:
                    00:bf:46:8d:c1:3b:4a:a7:e2:cc:fa:0f:3c:16:b3:
                    e3:fb:7e:40:da:da:53:f6:73:df:94:1e:75:c7:3c:
                    c4:7e:1e:aa:15:c6:7e:67:65:37:4d:2e:e9:4d:3f:
                    11:e7:39:7e:90:6a:c1:7a:21:35:59:bf:b6:7a:60:
                    3d:0f:ff:ad:e8:15:12:87:23:65:ef:e6:bc:5a:6f:
                    e3:32:68:b4:01:28:c2:74:78:63:a7:df:91:77:1d:
                    b8:58:23:7e:2b:40:0a:26:ea:4e:c7:84:e5:ea:18:
                    7f:b5:8a:c1:9b:f7:e6:81:c8:64:a0:99:90:cd:de:
                    ec:ba:d7:89:5f:1d:71:7f:e0:78:e9:f0:e1:31:4e:
                    62:0a:c8:8d:b1:0b:3a:66:13:9e:d0:29:47:e7:a4:
                    84:39:63:91:a5:4f:a8:ba:06:d9:6b:4c:2f:ec:65:
                    92:c0:8d:ae:49:cd:b5:43:7e:f2:46:16:2a:b7:40:
                    34:35:11:a9:85:7c:97:ca:c6:c3:ed:cb:86:46:48:
                    ea:e0:8c:3c:5c:31:76:7a:2e:24:90:76:4f:c8:12:
                    f2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:89:A7:5E:0E:30:86:BA:9A:71:F1:4E:42:1F:08:5E:53:57:F7:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d93c3278-18fc-3837-bb75-663397a84097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:8f:41:9c:95:9a:df:08:8b:c8:15:b7:1c:b5:62:3e:53:d2:
         af:4e:35:08:48:e6:e1:88:f4:65:80:50:d5:df:8f:13:62:42:
         d4:0e:04:e6:fa:d5:4d:60:eb:76:4b:7c:e2:c6:83:0a:06:73:
         2d:f4:b8:a4:94:dc:fd:be:6b:ae:da:46:34:fd:5f:d9:ee:e3:
         53:f9:f6:aa:33:c1:3f:43:85:7e:9a:34:f6:0f:19:b7:16:13:
         ff:fc:17:03:c9:e6:c8:cb:d1:41:3e:fb:93:c4:8a:09:36:c7:
         cf:6c:22:89:5a:5a:0e:ea:94:cd:97:4a:0a:ac:84:14:03:eb:
         95:80:c0:bf:26:89:0f:cb:73:fa:5d:b0:c9:d9:7d:b9:34:29:
         ad:a5:d0:a8:b3:76:09:01:e9:4c:de:85:95:a5:90:0e:47:f1:
         d0:43:4b:9b:51:74:dc:9d:3d:d9:3f:e9:eb:3a:f3:62:8b:a2:
         ad:fc:84:dc:20:b3:30:db:80:2d:57:80:a7:d8:e2:81:34:77:
         08:ca:7c:1c:ec:51:60:98:c0:ed:e1:61:8b:18:0e:ac:74:a0:
         eb:57:f1:1b:08:18:21:66:26:05:fe:32:10:a2:92:cc:38:f0:
         93:80:ef:aa:94:9c:bd:8e:ad:a0:09:4b:11:c1:3b:78:36:f1:
         8e:c9:01:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:04:52 2025 by rpki-client